Automated Exploit and Security Test Generation: A Systematic Literature Review
Systematic review of automated exploit generation shows dynamic analysis can close the gap between reported vulnerabilities and confirmed exploitability, reducing false-positive patching burden.
Summary written by editorial AI · Source link below
arXiv:2502.04953v2 Announce Type: replace Abstract: Static analysis techniques are often insufficient to determine whether a reported security vulnerability is exploitable and actually poses a real security risk to a software application. Dynamic analysis addresses this limitation by executing the target application with carefully crafted inputs that trigger or reproduce a given vulnerability. Over the past two decades, automatic exploit generation (AEG) and automatic security test generation (
Editorial Analysis
Automated exploit generation could help European enterprises prioritise remediation by confirming real exploitability, reducing wasted patching effort—especially relevant under NIS2 incident-response timelines.
Pilot automated exploit-validation tools to improve vulnerability triage accuracy and focus patching on confirmed-exploitable findings.
Forward-looking interpretation drafted by editorial AI under human review — not a reproduction of the source. See methodology.
External link — opens at arXiv Crypto & Security in a new tab.
More from the Research Desk
- Firecracker VM Escape: PwnEscape Part 23d
- A Gingerbread House for LLM Agents: Source-Planned Honeypots That Lure Autonomous Attackers into an Isolated Shadow3d
- LABBA: LLM-Assisted Behavioral Biometric Authentication3d
- A Cyber Range Evaluation of Inductive Autonomous Network Incident Response Agents3d
- KeHoSu: Keyed Homoglyph Substitution for Authenticated Text Provenance over Copy-Paste Channels3d